CloudflareのCAPTCHAを使って ユーザ体験を下げず不正利用を排除する / Cloudflare's captcha case study that does not degrade ux

Cloudflare Meetup Fukuoka vol1のLT資料です

Transcript

1. .FFUVQ'VLVPLB7PMŠ
   $MPVEGMBSFͷ$"15$)"Λ࢖ͬͯ
   ϢʔβମݧΛԼ͛ͣෆਖ਼ར༻Λഉআ͢Δ
   5PNPIJTB0EBŠ(.01FQBCP *OD
   

   View Slide

2. .FFUVQ'VLVPLB7PMŠ
   5PNPIJTB0EB
   (.0ϖύϘϗεςΟϯάࣄۀ෦
   4FOJPS&OHJOFFSJOH-FBE
   !MJOZPXT
   

   View Slide

3. .FFUVQ'VLVPLB7PMŠ
   എܠͱ՝୊
   ϗεςΟϯάࣄۀऀʹ͸ҎԼͷܧଓతͳෆਖ਼ར༻͕͋Δɻ
   ⚫︎
   ϑΟογϯάαΠτͷઃஔ
   ⚪︎
   લஈʹ$%/͕͋ͬͯΦϦδϯ͕Ӆṭ͞ΕͨΓ͢Δ
   ⚫︎
   ϑΟογϯάϝʔϧͷେྔૹ৴
   ⚪︎
   ྉۚͷࢧ෷͍Λ͠ͳ͍ͱૹΕͳ͍
   ⚫︎
   ΫϨδοτΧʔυͷେྔτϥϯβΫγϣϯ
   ⚪︎
   ୯ҰΞΧ΢ϯτͰͳ͘ෳ਺ΞΧ΢ϯτʹΑΔʢ୯ҰΞΧ΢ϯτͰ͋Ε͹ܾࡁ୅ߦۀऀͷػೳʹ
   ΑΔ੍ݶ͕Մೳʣ
   

   View Slide

4. .FFUVQ'VLVPLB7PMŠ
   🧑💻
   💳 "DDPVOU"
   "DDPVOU#
   ʜʜ
   1BZNFOU1MBUGPSN
   💳
   💳
   💳
   💳
   💳
   💳 ❌
   

   View Slide

5. ⚠͍ΘΏΔ$"15$)"Λ࢖ͬͯ
   ෳ਺ΞΧ΢ϯτͷಈత࡞੒ΛͰ͖ͳ͍Α͏ʹ͢Δ
   

   View Slide

6. .FFUVQ'VLVPLB7PMŠ
   $"15$)"ͱ͸
   $"15$)"͸νϟϨϯδϨεϙϯεܕ
   ςετͷҰछͰɺԠ౴ऀ͕ίϯϐϡʔλ
   Ͱͳ͍͜ͱΛ֬ೝ͢ΔͨΊʹ࢖ΘΕΔɻ
   ҎԼɺ༗໊ͳSF$"15$)"ͷྫɻ
   $IBMMFOHF $IBMMFOHF
   🧑💻
   

   View Slide

7. .FFUVQ'VLVPLB7PMŠ
   ֤$"15$)"ͷൺֱ
   ͪ͜Β͸ࣾ಺ධՁͰ༻͍ͨ΋ͷͰ͕͢ɺߴ͍௿͍ͷධՁ͕ᐆດͳͷͰׂѪ͠·͢ɻ
   ✔︎
   ✔︎
   

   View Slide

8. .FFUVQ'VLVPLB7PMŠ
   5VSOTUJMFͷ࢓૊Έ
   ಺෦ͷ࢓૊Έʹ͍ͭͯެ։͞Ε͍ͯΔ৘ใͱͯ͠͸ҎԼɻ
   ⚫︎
   ϢʔβʔνϟϨϯδΛ͠ͳ͍
   ⚫︎
   ૢ࡞ෆཁͳҰ࿈ͷখ͞ͳ+BWB4DSJQUͰ1SPPGPG8PSL΍1SPPGPG4QBDFͷνϟϨϯδ࣮ߦ
   ⚫︎
   ػցֶशϞσϧΛ࢖ͬͯϢʔβͷڞ௨఺͔Βܭࢉͷ೉қ౓Λௐ੔͢Δ
   ⚫︎
   ϓϥΠϕʔτΞΫηετʔΫϯʢݕূ͸σόΠε͕ݞ୅ΘΓʣΛར༻͠ɺ$PPLJFΛ୳ͨ͠Γɺ
   $PPLJFΛ࢖ͬͯ৘ใऩूͨ͠Γ͠ͳ͍
   

   View Slide

9. View Slide

10. 'SPOUFOE
    #BDLFOE
    $MPVE
    fl
    BSF
    

    View Slide

11. ΜͰɺͲ͏ͩͬͨͷ͔ʁ🧐
    

    View Slide

12. .FFUVQ'VLVPLB7PMŠ
    ಋೖޮՌ
    ʹϦϦʔεͦ͠ͷޙ΋ൃੜ͍ͯ͠Δ͕͕ଓ͍͍ͯΔɻ
    

    View Slide

13. .FFUVQ'VLVPLB7PMŠ
    ⚫︎
    ϢʔβʔମݧΛԼ͛ͳ͍$"15$)"ΛಋೖͰ͖ͨ
    ⚫︎
    ಋೖޙʹಛผͳӡ༻΋ͳ͍ɺτϥϒϧͳ͠
    ⚫︎
    ࠓͷͱ͜Ζແྉ
    ⚫︎
    ෆਖ਼ར༻਺ͷݮগͱͷҼՌؔ܎͕ෆ໌ͳͷͰࠓ͸༷ࢠݟঢ়ଶ
    ·ͱΊ
    $MPVE
    fl
    BSF5VSOTUJMFΊͪΌྑ͍Ͱ͢ɻ
    

    View Slide